Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JPmFAerqBoiPes8wPlOzHZchN5Y.roa
File:                     JPmFAerqBoiPes8wPlOzHZchN5Y.roa (raw, json)
Hash identifier:          v9UEQwzfq/YYS3ApFeo/16bEdRQIyFC9ntVEsCyI9f0=
Subject key identifier:   24:F9:85:01:EA:EA:06:88:8F:7A:CF:30:3E:53:B3:1D:97:21:37:96
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       0CB886E0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JPmFAerqBoiPes8wPlOzHZchN5Y.roa
Signing time:             Sat 01 Jan 2022 05:05:00 +0000
ROA not before:           Sat 01 Jan 2022 05:05:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51681
IP address blocks:        45.133.2.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213419744 (0xcb886e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Jan  1 05:05:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24f98501eaea06888f7acf303e53b31d97213796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:59:eb:21:fa:2d:5f:ad:a3:db:a4:68:71:
                    7d:43:3a:de:a0:c7:db:11:c7:f7:64:57:e0:c6:d0:
                    0f:1e:0f:e7:94:3f:31:46:a1:46:10:f0:f0:4e:f3:
                    af:6f:13:4a:38:ae:9d:6b:3d:89:db:3d:d2:e3:28:
                    0f:6c:0b:f9:1e:50:67:c1:e4:db:31:4e:91:f5:70:
                    ce:88:fa:4b:65:a5:ec:b5:1c:be:4e:5d:5f:fd:6c:
                    d6:19:fe:80:09:4d:e6:55:59:fe:fd:1e:75:da:7d:
                    e9:1a:19:6e:63:00:ab:82:bc:19:6f:c3:fa:a6:bf:
                    83:b5:1f:39:87:3a:58:1a:36:fa:fc:88:34:86:2b:
                    a4:27:ba:2a:ca:ba:3c:cc:96:ad:94:0e:a4:e7:4b:
                    b3:ca:11:fc:10:ee:94:21:17:bd:82:6a:4d:f3:4f:
                    dd:75:59:ae:dd:ed:59:4b:f1:f8:e6:c6:5b:53:c8:
                    44:20:ac:56:92:b0:46:ca:6e:92:f6:2c:7c:d8:86:
                    30:95:1e:f2:e7:b5:1f:a0:a2:8b:12:c9:fe:31:41:
                    c3:94:4b:1f:19:07:09:dc:98:2c:ef:9c:43:3c:03:
                    f2:2d:88:7b:69:f3:6b:66:93:87:ff:35:79:10:3b:
                    5c:2c:b0:b5:fd:48:bd:27:3c:10:d4:02:5d:c9:ce:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:85:01:EA:EA:06:88:8F:7A:CF:30:3E:53:B3:1D:97:21:37:96
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JPmFAerqBoiPes8wPlOzHZchN5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:54:54:1e:e4:f1:c5:48:d9:77:93:b3:05:02:b2:d9:6b:21:
         02:45:b4:40:b9:19:6c:9a:06:52:b3:a7:fa:af:78:5c:1a:ab:
         4c:7c:e4:09:de:29:01:75:bb:a6:78:55:22:2e:76:83:f2:5c:
         a4:30:e1:8d:be:68:01:fe:e5:8d:64:d9:11:16:e2:1c:51:14:
         9d:62:2a:72:10:2e:e9:90:65:bd:71:35:8b:89:8e:ae:17:ed:
         75:d9:64:a2:b4:77:74:bb:1e:0b:a7:8b:e5:c7:a6:5e:21:eb:
         41:2a:d7:40:08:c1:24:a5:22:4f:06:b6:89:51:3a:91:6d:ea:
         03:2b:02:0d:6a:8a:b4:b4:32:0d:57:1a:a5:35:fd:4a:02:9d:
         db:1f:0b:a3:af:b1:23:5e:3e:37:13:2c:02:a3:cc:8f:93:01:
         25:dd:cb:4c:fa:7a:b7:67:d6:b5:f2:89:53:8e:00:ed:5a:bd:
         7d:7f:9f:7f:64:ea:40:4c:10:c1:31:d3:0c:0e:b1:a5:02:80:
         6e:6e:61:b6:e5:c9:a5:65:98:32:23:79:7d:7a:c9:3a:b5:54:
         af:81:a9:57:f4:90:19:52:15:0f:5c:3b:a5:bb:bd:29:ca:44:
         47:6d:bf:91:08:35:76:a8:59:0e:c5:f9:ba:aa:84:c4:89:8d:
         06:9f:83:cb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDLiG4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDEw
MTA1MDUwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjRmOTg1MDFlYWVh
MDY4ODhmN2FjZjMwM2U1M2IzMWQ5NzIxMzc5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALODWesh+i1fraPbpGhxfUM63qDH2xHH92RX4MbQDx4P55Q/
MUahRhDw8E7zr28TSjiunWs9ids90uMoD2wL+R5QZ8Hk2zFOkfVwzoj6S2Wl7LUc
vk5dX/1s1hn+gAlN5lVZ/v0eddp96RoZbmMAq4K8GW/D+qa/g7UfOYc6WBo2+vyI
NIYrpCe6Ksq6PMyWrZQOpOdLs8oR/BDulCEXvYJqTfNP3XVZrt3tWUvx+ObGW1PI
RCCsVpKwRspukvYsfNiGMJUe8ue1H6CiixLJ/jFBw5RLHxkHCdyYLO+cQzwD8i2I
e2nza2aTh/81eRA7XCywtf1IvSc8ENQCXcnOtQcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQk+YUB6uoGiI96zzA+U7MdlyE3ljAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
L0pQbUZBZXJxQm9pUGVzOHdQbE96SFpjaE41WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2FAjANBgkqhkiG9w0BAQsFAAOC
AQEAE1RUHuTxxUjZd5OzBQKy2WshAkW0QLkZbJoGUrOn+q94XBqrTHzkCd4pAXW7
pnhVIi52g/JcpDDhjb5oAf7ljWTZERbiHFEUnWIqchAu6ZBlvXE1i4mOrhftddlk
orR3dLseC6eL5cemXiHrQSrXQAjBJKUiTwa2iVE6kW3qAysCDWqKtLQyDVcapTX9
SgKd2x8Lo6+xI14+NxMsAqPMj5MBJd3LTPp6t2fWtfKJU44A7Vq9fX+ff2TqQEwQ
wTHTDA6xpQKAbm5htuXJpWWYMiN5fXrJOrVUr4GpV/SQGVIVD1w7pbu9KcpER22/
kQg1dqhZDsX5uqqExImNBp+Dyw==
-----END CERTIFICATE-----